Schneider Electric EcoStruxure Process Expert
9 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-0327 | Versions 2020R2 ; Versions 2021 & 2023 (prior to v4.8.0.5715) | CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as | HIGH 8.5 | 0.2 % | ||
| CVE-2023-27975 | Versions prior to v2023 | CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure C | HIGH 7.1 | 0.1 % | ||
| CVE-2023-6408 | Versions prior to v2023 | CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a de | HIGH 8.1 | 0.3 % | ||
| CVE-2023-6409 | Versions prior to v2023 | CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with applicatio | HIGH 7.7 | 0.2 % | ||
| CVE-2022-45789 | All Versions | A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the c | CRITICAL 9.8 | 1.5 % | ||
| CVE-2022-45788 | All Versions | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of se | CRITICAL 9.8 | 1.2 % | ||
| CVE-2022-37300 | V – 2021 | A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and wri | CRITICAL 9.8 | 0.8 % | ||
| CVE-2021-22797 | unspecified – < 2020 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious scri | HIGH 7.8 | 26 % | ||
| CVE-2022-24323 | V2021 and prior | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between | MEDIUM 5.9 | 0.9 % |